TR-069 client on Telkom branded routers

[HavocXphere]

I see they come with preconfigured with a TR-069 WAN Management Protocol. They seem to connect to http://tsm.telkomadsl.co.za:1111/ACS-INTF at regular intervals & appear to be uniquely identifiable. Anybody know what that does?

 

[Tim the Techxpert]

Hi There,
I have not seen this one before. It may well be providing them with connectivity information and it could enable them to identify issues that you may be having on the line.
Obviously everyone is concerned that big brother may be watching you but I suspect that is not what they are doing.

Have you asked Telkom?

Regards

Tim

 

[Tinuva]

TR-069 protocol is used to automate the configuration on CPE (Customer Premise Equipment).

These modems definitely are uniquely identifiable, as long as Telkom know the mac address of the modem given to you, they should be able to send configs to it remotely. Many ISPs overseas actually use this model to help them push out firmware updates, configure the modem for the client so that clients dont need to know anything, just plug in, modem configure itself to the user's account, and the user can start using the internet without ever needing to do anything other than plug in the new modem.

 

[Tim the Techxpert]

So Tinuva it is not anything to worry about other than it is going to use some of your bandwidth in doing firmware updates?

Regards Tim

 

[Grouter]

One has the option to enable / disable it. I disabled it. I'll configure my own equipment thanks all the same telkom.

 

[HavocXphere]

These modems definitely are uniquely identifiable, as long as Telkom know the mac address of the modem given to you, they should be able to send configs to it remotely.

This system seems to have the identifier programmed in. i.e. Username for the TR069 looks like:

2DA04A-DGN2200v2-3DB12C484987 (changed a bit)

I hadn't considered MAC tbh.

Pity that the config file is encrypted...I'd have loved to have a look at the default pass they used. I hope its somehow linked to the unique router & not universal. Just in case it is universal though I think I'll switch it off.

Have you asked Telkom?

I try to minimize interactions with them. Last Telkom shop I was in insisted that a 3G dongle is what I need to connect to a wifi AP, so I don't think they can answer me on TR-069.

I'll configure my own equipment thanks all the same telkom.

I'll do the same.

 

[Tinuva]

Hi There,
I have not seen this one before. It may well be providing them with connectivity information and it could enable them to identify issues that you may be having on the line.
Obviously everyone is concerned that big brother may be watching you but I suspect that is not what they are doing.

Have you asked Telkom?

Regards

Tim

You can google TR069 is a standard to configure modems remotely. This standard is not used to spy on you, which I believe is what you are concerned about.

If the ISP want to spy on you, there is much easier and effective ways to do it, without the need to have a protocol like this enabled on your modem/router.

Thus, if you are concerned about spying on you, this is not how they will be doing it.

I work at an ISP where we use TR069 to configure the static uncapped modems remotely. It is far easier to pay for this, than have to expect users to understand how to set up the tunnels for the static ips and do the configuration of the routing. Having it done automated via TR069 saves a lot of trouble.